Viral video-app TikTok collects “excessive” amounts of data, according to new analysis of its source code, raising alarm about the volume of information and its security following an admission that staff in China can access the data of millions of Australian users.

TikTok checks device location at least once an hour, continuously requests access to contacts even if the user originally denies, maps a device’s running apps and all installed apps, and more, according to a white paper by Canberra-based cybersecurity and intelligence firm Internet 2.0.